COLD SPRING – Haldane Central School District officials did not adequately manage and monitor information technology accounts and permissions, an audit by the state comptroller’s office found.
As a result, the examination found the district has an increased risk that it could lose important data and suffer serious interruption in operations, according to the state agency.
The audit found the district did not disable 74 unneeded network user accounts of the 300 accounts examined. The 74 accounts included generic and former employee accounts. The study also found the district did not create secondary user accounts, for three network user accounts with administrative permissions, to be used for non-administrative activities.
Also, sensitive IT control weaknesses were communicated confidentially to officials.
The auditors said the district should evaluate all network user accounts to ensure unneeded network user accounts are disabled and should assess all network user accounts with administrative permissions and create secondary accounts to be used for non-administrative activities.
District officials agreed with the state’s recommendations and have initiated or indicated they planned to initiate corrective action.
